Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2716/ZVRasckQCN9r97ezbW1zjNjJY9M.roa
File: ZVRasckQCN9r97ezbW1zjNjJY9M.roa (raw, json)
Hash identifier: I00f1eG/fch1BwNv0YWA9hR9Y1aahzGC+6y+xYsUKeY=
Subject key identifier: 65:54:5A:B1:C9:10:08:DF:6B:F7:B7:B3:6D:6D:73:8C:D8:C9:63:D3
Certificate issuer: /CN=39EE852FE138CDEDC5B42D11A34295D109AD4925
Certificate serial: 012A
Authority key identifier: 39:EE:85:2F:E1:38:CD:ED:C5:B4:2D:11:A3:42:95:D1:09:AD:49:25
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/ZVRasckQCN9r97ezbW1zjNjJY9M.roa
Signing time: Tue 27 May 2025 03:57:57 +0000
ROA not before: Tue 27 May 2025 03:57:57 +0000
ROA not after: Wed 15 Apr 2026 09:08:30 +0000
asID: 209242
IP address blocks: 45.248.88.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 15 Jun 2025 22:48:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 298 (0x12a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39EE852FE138CDEDC5B42D11A34295D109AD4925
Validity
Not Before: May 27 03:57:57 2025 GMT
Not After : Apr 15 09:08:30 2026 GMT
Subject: CN=65545AB1C91008DF6BF7B7B36D6D738CD8C963D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b5:96:0c:fb:f9:3a:2e:78:c9:2f:b5:38:2c:
92:cb:42:d7:bd:cd:ec:7e:b0:d4:1b:88:46:14:10:
ba:02:ae:b4:b7:98:c5:a6:ae:03:96:80:40:cb:e1:
2c:f5:fa:57:8e:16:62:a8:8b:11:21:76:11:3e:80:
43:92:9a:1b:c3:ad:ed:1a:43:e4:88:23:96:33:71:
e0:1b:7b:00:69:bd:b9:ad:db:35:21:ad:e8:e6:6e:
85:64:02:09:cc:31:71:04:fa:d3:71:9d:93:a5:4c:
a1:fd:f2:de:94:89:66:a3:1f:ae:6a:7b:af:9f:0a:
ba:1a:e7:40:2a:12:04:eb:14:7e:bd:09:22:ce:9f:
25:5d:27:ad:9c:51:2c:ee:0b:a4:fb:e4:1f:ae:2a:
57:f5:82:ee:e6:5c:5a:05:a6:c2:aa:fe:a5:b1:0a:
e3:01:54:e8:8e:16:a8:8a:07:0d:7e:c8:63:17:36:
0f:43:57:99:28:e9:0c:34:af:97:dc:4d:cc:9c:75:
22:6b:e9:e2:00:17:04:b9:4a:02:75:57:98:3e:8a:
ac:a9:f6:51:e5:a7:bc:aa:93:2a:bb:d7:11:bd:16:
dd:ef:bc:86:73:5d:30:b8:bc:1c:8d:60:32:7a:4c:
42:3c:29:e4:67:17:e7:da:68:24:8a:a6:b7:da:4e:
9b:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:54:5A:B1:C9:10:08:DF:6B:F7:B7:B3:6D:6D:73:8C:D8:C9:63:D3
X509v3 Authority Key Identifier:
keyid:39:EE:85:2F:E1:38:CD:ED:C5:B4:2D:11:A3:42:95:D1:09:AD:49:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/ZVRasckQCN9r97ezbW1zjNjJY9M.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.248.88.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:87:99:7d:45:e8:43:4c:d2:93:cb:3c:1b:d7:45:a5:33:b3:
90:5e:f5:32:5b:c2:a6:c4:ea:ff:2a:f5:aa:b2:31:22:a8:c7:
c2:a0:6c:92:05:02:46:dc:9f:27:b7:92:1c:a2:5c:7a:c7:35:
fb:30:bc:fd:d0:40:ca:02:5a:56:3c:25:84:7f:7f:89:b3:67:
e2:a7:eb:de:90:98:1e:8e:48:16:f6:9d:52:9c:4e:c6:0c:d2:
b5:67:b3:92:e7:15:7c:78:78:f3:d6:08:8a:df:d0:eb:7c:58:
a5:2d:a3:92:bf:86:43:67:f2:7b:7a:c4:8d:31:be:18:7c:a3:
dc:b8:bb:23:aa:19:0a:2b:0b:fc:84:b6:4f:69:5c:54:24:f8:
17:58:c9:9d:74:62:57:3b:0b:d8:4c:aa:a2:1e:da:fe:ab:9b:
13:84:b6:e3:35:09:e2:4e:2c:fd:40:e0:93:bd:8e:89:63:e9:
68:67:ee:c2:4a:42:ed:3e:58:6a:d9:d5:2c:74:58:1d:8a:94:
e4:cc:c8:14:e6:05:36:57:bf:fa:60:48:86:ed:8c:a8:a9:d1:
fd:2c:eb:fb:fe:a3:68:de:34:1b:48:57:79:bf:6e:9f:97:d6:
44:ba:9b:4e:c5:fb:6d:a2:90:da:b9:1e:38:56:b7:d3:77:79:
a6:c5:95:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 09:05:17 2025 by rpki-client